Update dependency @stoplight/spectral-cli to ^6.15.0 - #2
Security Report
| Vulnerability | Severity |  CVSS Score |
Exploit Maturity | EPSS | Vulnerable Library | Direct Library | Suggested Fix | Issue |
|---|---|---|---|---|---|---|---|---|
CVE-2025-13465Path to dependency file: /package.json Path to vulnerable library: /package.json Dependency Hierarchy: -> spectral-cli-6.15.0.tgz (Root Library) -> ❌ lodash-4.17.21.tgz (Vulnerable Library) |
 Critical |
9.9 | Not Defined | 0.1% | Transitive lodash-4.17.21.tgz |
spectral-cli-6.15.0.tgz | Transitive lodash-amd - 4.17.23,lodash - 4.17.23,lodash-es - 4.17.23 |
None |
CVE-2024-4068Path to dependency file: /package.json Path to vulnerable library: /package.json Dependency Hierarchy: -> spectral-cli-6.15.0.tgz (Root Library) -> fast-glob-3.2.12.tgz -> micromatch-4.0.5.tgz -> ❌ braces-3.0.2.tgz (Vulnerable Library) |
 High |
7.5 | Not Defined | 0.2% | Transitive braces-3.0.2.tgz |
spectral-cli-6.15.0.tgz | Transitive braces - 3.0.3 |
None |
CVE-2024-4067Path to dependency file: /package.json Path to vulnerable library: /package.json Dependency Hierarchy: -> spectral-cli-6.15.0.tgz (Root Library) -> fast-glob-3.2.12.tgz -> ❌ micromatch-4.0.5.tgz (Vulnerable Library) |
 Medium |
5.3 | Not Defined | 0.1% | Transitive micromatch-4.0.5.tgz |
spectral-cli-6.15.0.tgz | Transitive 4.0.8 |
None |
CVE-2025-5889Path to dependency file: /package.json Path to vulnerable library: /package.json Dependency Hierarchy: -> spectral-cli-6.15.0.tgz (Root Library) -> spectral-core-1.20.0.tgz -> minimatch-3.1.2.tgz -> ❌ brace-expansion-1.1.11.tgz (Vulnerable Library) |
 Low |
3.1 | Proof of concept | 0.0% | Transitive brace-expansion-1.1.11.tgz |
spectral-cli-6.15.0.tgz | Transitive 1.1.12 |
None |
Total libraries scanned: 209
Scan token: 64c5250f250140e6b4f40caf66b45560